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bG done 40 tx ^ itec controls on the creation, assignment, 
utilization and recording of code designations (aliases, pseudonym, 
cryptonyos, digraphs and indicators)? * 

2 , FACTS 

- -h, -eolations Of the foraer Office of special operations and Office 
Ox -■olicy Coordination prescribe procedures for control of code designations 
Mo such Regulations or irocedures exist for other Agency components. 

b. OSC and 0?C used apja-oacioately jur of all code designations. 

c. Code designations ore used in caamunicatioas, in training, in covert 

f f U£U1Ciai acco « rbla C* ^ in other phases of Agency adainSs- 
tration and operations. ' ^ J 

thei^tapSSd 2? aoslsaEtio "° 1iotc connotations which preclude 

e. Code designations are being used excessively. Dee Annex "A". 

. S* . r f" 3ere i ® ■ £ ‘°- coordination of procedures fox- utilisation of code 
designations. See .rmex "B". Ui uOUG 

See fnnex h ”C”. i8 *** ceritraliZGtion of control of code designations. 

i. & 3 h fs s^veyed the recording of code designations and their true 
najc counterparts in various ..Agency components and has reettaaended a tig* sSlinr 
of security measures. 

* 

3. DISCUSSION 

a. Code designations are designed to perform only one function: disruisinr 
oovort or sensitive Identities of persons, pieces, agencies, projects, o^ft^ 

S other ~ pr ° tecte(i 8W«ol disclosure, ^hey sSKid be ~ 

used only when other security .measures are ins ufficient. 
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b* Uh«>ctroU*d end imct ive uee of code designations 
»**« their v&lue as "SUafa , iapalr* Agency efficiency sod 
cocetitua® * potential threat to security* 

«* 080 soft GPC dejpilstions provide for use of code deeigBQ- 
Uons f friNsniy in regard to emaatnicatt «M, 060 ftegulaUone 
•** sore detailed i» psoiwribiag pros ed&res for the creation, 
sssidOOMat* recording, utilisation soft centralisation oaf control 
(£» IJooorda Integration Staff) of code designations* , These 
iiegulstloaf do ast, sad should cot, however , establish broad 
Afeoey policies, nor do they provide for tbs greatest possible 
a»eeure of control. Thus, is ©SO end OKI, there bee bees 
freqiseafciy uaaeeeaaery end excessive use of code designations. 
tea**** "S* end *<?’* indicate eoereasee of a seed for control, 
ifelle Axaaex *B* indicates * lack of coordi tuition between 0S0 end 
OfC. 

d* Other Agency components have had to rely upon hearsay, open 
oceaeiooel instructions f iota 000 and OPC aod upon guess-work is their 
utilisation and control of code designations* Xa such components, 
particularly, there is a »ieusdesret«diag of the taftnitism sad 
usee of code designations* 

e* There is m specific delegation, of authority to review 
need for code designations sad to restrain excessive use* While 
There Is sozae centralisation is ares divisions, the authority haa 
usually bean delegated at too low a level for effective control, 
basoning a purely clerical control* 

f* Kxanples of the potential dangers of uncontrolled use of 
code de«i«aafciflaa i 

Cl) bapbaoard creation of aliases end peeudonysa. in 

«*oe«, it wee discovered that the fictitious mease created 
duplicated true news of CIA covert employees* 

(2) overuse of code designations in oomunlca tione « 

Since cables are already encrypted, the uee of eryptoupms 

la cables lsneaeurably complicate# decider lag by addressees* 

In addition, aom cod# designations serve no purpose, shea 
the r emin d e r of the text of the msm&t immediately die* 
closoe the concealed identities. 

(3) Use of aliases instead of pseudonym. Fseudeagme are 
legal mm a, for inu&«Agency purposes, and can be used to 
aim teml doewaeste* Aliases are invalid for this purpose. 
Pseudonym have been used outside CIA, thus coiapronislsg their 
•eourltyi although only aliases ere designed for externa! use* 
Other samples sen be sited* 
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*. Security i® toe recording of code designations nd 
to«lr true asm counterparts la an iagwrtsat fee tor la the 
ew faol gf code de si gn ation* . I & i he* ooadacted surveys and 
reported that, ta Irani Agency cooponeat*, code desigae* 
tioas awd their true anae eouaterparu ore betas interfiled. 
***t«totly la one Set Of index cords, this iyste* of fllS 
presents a potential threat to the cover of CXA personnel. & 
other Agency components, separate meo ore Maintained for code 
designations end their tree none counterpart* , and the only 
common * wra of ideatificstlso i* e central ms&eriag system 
®*ah e system is con s i d er ed secure by I 4 S, 

H. C0»O4£IC«3..~ 


a* While code iMlttHdiomi met be need i a awo cases, their 
eacceeelve use any be care deaeging than use of true identities. 

«* need for atroager control is the oreatiCEu 

aMigoaeatt utilisation and recording of cede designs* 
tieoe. Chi* need ie recognised by ell CXA components. 

5« dCTIfei RSC0I#®3ISEB»«*» Xt Is rscrassesdsd that: 

a. *3%whi«h is * proposed CXA Segulatioa, be adopted. 

«f tos Agency h era uncwiditioaaUy concurred 7S 

Comptroller's office. She Comptroller 
the l«ovi^es tost, because of the sd*uSX«Uve 

^ * ******** **»« His office « 
coa«dy nith Paraph ?<2), efaich requires separate recording m*d 
filing of code designations sad true asm counterparts* 

_ AU ® ffte * r * had employes* of CIA mite a concerted effort 
to check, unmceoaery sol injuxsrper use of code desi gnations . 


3 Attach. 
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